use ghcr registry for rsslay image

At the moment, we have a number of yml files in the root of the repo
that either have verbose na...

Any non-secret variable is kept in the inventory file itself, while the
secrets are in the group...

This sets up a new pattern where the inventory files are held
in their own directory, using grou...

This makes it so that ansible-vault grabs your vault password from your
env vars, so you odn't h...

New server playbook

Notification role tweak

This is to speed up the iteration loop, since if the file
is on the server, it means it was alre...

When we make a digital ocean droplet, we add in the ssh keys we
want on that droplet. These get...

Notification service role

Adds an ansible role for our nos notification service
(https://github.com/planetary-social/nos-n...

Add rsslay role and example inventory/playbook

Add an env variable with a domain name

Add node exporter role

ignore local .env files

add delete-old-blobs cronjob

Metrics setup

Updated nginx role

Add certbot-cloudflare role

Consistent styles

Hardening role

This task is not specific to digitalocean, but mosh is useful to have.

I moved the installation...

Common is making sure the software is updated and we're only
installing what we actually use, wh...

these will either be necessary for ansible scripts or debugging on the server

After removing unnecessary dependencies, do a full apt update, apt upgrade

This sets the same general yaml style for each task and consistent
spacing between them

add bypass_invite_token as envvar for room

Update ansible scripts for proper serving of blobs

this fits the pattern of our single host nginx config better.

Updated deploy

Re-enable EBT on pubs

Fixed underlying issue causing nodes to flap. EBT should work again.

Make memory limit a dynamic variable

* add a task to planetary-graphql which updates the nginx config for the blobs server

* add an nginx/lets encrypt role with ssl config
* set planetary-graphql domain to redirect to ...

add planetary graphql